1. Information on the collection of personal data
(1) In the following we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is:
AP Citydesign
Feldchen 15
52070 Aachen
Tel: 0241/152832 (Mon–Fri from 8:00 am to 5:00 pm)
E-Mail: info@ap-citydesign.com
(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name, your address if applicable) will be stored by us in order to answer your questions. We delete the data arising in this context after the storage is no longer necessary, or restrict processing if there are statutory retention obligations. The data processing for the purpose of contacting us is based on your voluntarily given consent pursuant to Art. 6 (1) lit. a GDPR
(4) If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the specified criteria for the storage period.
2. Your rights
(1) You have the following rights vis-à-vis us with regard to your personal data:
Right of access,
Right to rectification or erasure,
Right to restriction of processing,
Recht auf Widerspruch gegen die Verarbeitung,
Right to object to processing,
(2) You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us.
3. Collection of personal data when visiting our website
(1) When using the website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 (1) lit. f GDPR):
– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status / HTTP status code
– Amount of data transferred in each case
– Website from which the request comes
– Browser
– Operating system and its interface
– Language and version of the browser software.
(2) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using and through which certain information flows to the entity that sets the cookie (in this case us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer overall more user-friendly and effective.
The lawfulness of the processing is based on Art. 6 (1) lit. f GDPR, our legitimate interest in processing the personal data.
(3) Use of cookies:
a) This website uses the following types of cookies, the scope and function of which are explained below:
– Transient cookies (see b
– Persistent cookies (see c).
b) Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
d) You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third-party cookies or all cookies. We point out that you may then not be able to use all functions of this website.
4. Objection or revocation against the processing of your data
(1) If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have expressed it to us.
(2) Insofar as we base the processing of your personal data on the balancing of interests, you may object to the processing. This is the case if the processing is in particular not necessary for the performance of a contract with you, which is presented by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
(3) Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time.
(4) If you wish to exercise your right of revocation or objection, an e-mail to info@ap-citydesign.com is sufficient.
5. Disclosure of data
Your personal data will not be transmitted to third parties for purposes other than those listed below.
We only pass on your personal data to third parties if:
You have given your express consent to this in accordance with Art. 6 (1) lit. a GDPR,
the disclosure is necessary for the assertion, exercise or defence of legal claims pursuant to Art. 6 (1) lit. f GDPR and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
in the event that there is a legal obligation for disclosure pursuant to Art. 6 (1) lit. c GDPR, and
his is legally permissible and necessary for the processing of contractual relationships with you pursuant to Art. 6 (1) lit. b GDPR.
6. Shop
On our website we offer users the opportunity to register by providing personal data and to place orders. The data is entered into an input mask and transmitted to us and stored.
At the time of registration, the following data is stored:
The IP address of the user
Date and time of registration
Name
Adress
Telephone
Payment data
Password
As part of the registration process, the user’s consent to the processing of this data is obtained.
For the processing of payment transactions, the transfer of your data to the payment service provider selected by you is necessary.
For the shipment of goods, we must transmit your data to the shipping service provider (e.g. freight forwarder).
The legal basis for the processing of the data is, if the user has given consent, Art. 6 (1) lit. a GDPR.
If the registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 (1) lit. b GDPR.
Registration of the user is not required for the provision of certain content and services on our website. Registration of the user is also required for the fulfilment of a contract, for example service contracts with the user, or for the implementation of pre-contractual measures. Otherwise, the functions of our web shop cannot be used.
The data will be deleted as soon as they are no longer necessary for the purpose of their collection.
This is the case for the data collected during the registration process if the registration on our website is cancelled or changed.
This is the case for the data collected during the registration process for the fulfilment of a contract or for the implementation of pre-contractual measures when the data are no longer required for the performance of the contract. Even after conclusion of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations.
As a user, you have the option of cancelling the registration at any time. You can have the data stored about you changed at any time.
If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.
A cancellation of the registration can be requested informally by e-mail to the following e-mail address: info@ap-citydesign.com.
7. Further functions and offers of our website
(1) In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
(2) Use of social media plug-ins
We currently use the following social media plug-ins: Instagram and YouTube. We use the so-called two-click solution. This means that when you visit our website, no personal data is initially passed on to the providers of the plug-ins. You can recognise the provider of the plug-in by the marking on the box above its initial letter or the logo. We open the possibility for you to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it does the plug-in provider receive the information that you have accessed the corresponding website of our online offer. In addition, the data mentioned under § 3 of this declaration are transmitted. In the case of Facebook, according to the respective provider in Germany, the IP address is anonymised immediately after collection. By activating the plug-in, personal data from you is therefore transmitted to the respective plug-in provider and stored there (in the case of US providers in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via the security settings of your browser before clicking on the greyed-out box.
We have no influence on the data collected and data processing operations, nor are we aware of the full extent of the data collection, the purposes of the processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.
The respective social media or plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for non-logged-in users) to display demand-oriented advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 (1) lit. f GDPR.
The data is transferred regardless of whether you have an account with the provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be directly assigned to your existing account with the provider. If you activate the button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, especially before activating the button, so that you can avoid such an assignment to your profile with the plug-in provider.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the privacy policies of these providers provided below. There you will also find further information on your rights in this regard and setting options to protect your privacy.
Addresses of the respective plug-in providers and URL with their privacy notices:
Instagram: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, https://de-de.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; https://policies.google.com/privacy
8. Data security
We use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser within the website visit. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
We also take appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
9. Third-party providers
Despite careful checking, we cannot accept any liability for the content of external links. The operators of the linked pages are solely responsible for their content.
10. Currency and amendment of this privacy policy
This privacy policy is valid and has the status of March 2024.
Due to the further development of our website and offers above or due to changed legal or official requirements, it may become necessary to change this privacy policy. The current privacy policy can be accessed and printed out by you at any time on this page.
